Apple School Manager and Managing Apple Accounts - Domain Verified, Next Steps?

[Miscbrah]

Morning everybody - apologies in advance if this is painful but I'm no Apple person. Trying to seize some old independently-created Apple accounts the former IT manager made (for resetting of passwords etc) and made some progress, but also not entirely sure what I'm expecting here.

 

So, in Apple school manager, domain is federated in (I guess??) the correct way:

 

 

Great.

 

I don't know entirely why there's 142 Apple accounts unmanaged with anything to do with my school out there in the world or what they are, so I guess that's question 1.

 

Next step I guess is also to start the domain capture. Nervously pressing the link I get this:

 

 

Right, this bit starts to worry me. I have visions of clicking this and nobody being able to log into their Microsoft accounts again because *something* happened and I can't figure out the *something*. So question 2 would be, in general terms, what the heck will happen with or to my Microsoft accounts after this? Also, what will they then be able to sign in with and do re the Apple store, Apple services and purchases etc etc?

 

Can't really do anything else though without that toggle, and clicking that does this:

 

 

Well no actually, now you mention it I'm not sure about any of this any more and delighted to hear whatever I'm pondering doing has no way back!

 

Reading the help articles on the Apple knowledgebase and it seems like that all will do what I want, but I'm not so certain of it that I'd start clicking things without understanding the full implications of it.

 

If anyone's passing and reading this and fancies literally spoonfeeding me through this ominous set of hazards it'd be amazing of you! Bit too daunted to go further at this stage.

 

Thanks hugely for reading even!

 

 

[Brimstone]

Hi there........

 

When you Federate your school domain in ASM to Entra it goes and looks at the accounts for anyone who is using that same domain for existing Apple services using a personal Apple account, they could be signed into their iPad, their iPhone or their Apple TV using what is a school owned domain, which has all sorts of security issues. In your case you have 142 members of staff using an unmanaged school domain based email address for personal use. Each one of those will get an email telling them they must change the email address being used to sign into these services, importantly they will not lose access to any paid for content. ASM syncs all of the user accounts and classes from Entra and automatically creates Apple Managed Account in ASM for you.

 

This will ultimately depend on whether you intend to use Federated Authentication and Directory Syncing, take a read through the link..

 

https://support.apple.com/en-gb/guide/apple-school-manager/axm5e0af487c/1/web/1#axm5e8f8847d

[pete]

^ Basically that.  They get a "you need to do X by Y" notification, with nagging and then you get the domain.

 

Also, make sure you create [email protected] accounts for administering Apple School.  You need an account that's not synced by Apple School if it goes sideways.  Make sure any cert renewals are linked to the appleid.com account(s).

[Miscbrah]

You're both lovely thank you! I'll have a read of the info there.